5 matches found
CVE-2021-32551
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to other local users...
CVE-2021-32551
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to other local users...
CVE-2021-32551
CVE-2021-32551 affects Ubuntu Apport: read_file() in apport/hookutils.py could follow symbolic links or open FIFOs, exposing private data to other local users when used by the openjdk-15 package apport hooks. The issue is tied to Apport’s information-gathering operations and is addressed in Ubunt...
Ubuntu 16.04 ESM : Apport vulnerabilities (USN-4965-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4965-2 advisory. USN-4965-1 fixed several vulnerabilities in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...
UBUNTU-CVE-2021-32551
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to other local users...